Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/8FD49B16BAE411EE9198A471C4F9AE02.roa
File:                     8FD49B16BAE411EE9198A471C4F9AE02.roa (raw, json)
Hash identifier:          u+JMYeb8gD5HU0OlGXo0Chq6M3KLkPgFbtazxXNmZmY=
Subject key identifier:   49:58:BB:35:F3:A1:57:5B:7B:FA:47:1E:69:AE:23:1F:6C:01:AA:71
Certificate issuer:       /CN=A91FA851/serialNumber=B9250FDE3FABD59FA5608230FEA7A23C4B4C8968
Certificate serial:       06
Authority key identifier: B9:25:0F:DE:3F:AB:D5:9F:A5:60:82:30:FE:A7:A2:3C:4B:4C:89:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/8FD49B16BAE411EE9198A471C4F9AE02.roa
Signing time:             Wed 24 Jan 2024 18:15:32 +0000
ROA not before:           Wed 24 Jan 2024 18:15:32 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     138548
IP address blocks:        2401:7960::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.crl
                          rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 08:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA851/serialNumber=B9250FDE3FABD59FA5608230FEA7A23C4B4C8968
        Validity
            Not Before: Jan 24 18:15:32 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65b153c4-dd0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:12:4c:91:86:bc:c6:d8:80:5f:55:60:c9:c6:
                    c4:a3:c2:2b:6c:bf:98:76:2a:e9:74:6f:29:8e:bd:
                    6c:3d:36:74:67:83:00:37:ac:ea:3f:c5:f8:ee:6f:
                    7b:37:73:2e:f3:4c:f4:e3:f8:f6:91:bd:12:6f:25:
                    6a:55:55:ae:9e:d3:5b:30:e6:c6:ca:03:01:0e:af:
                    f3:dc:31:79:69:a1:c4:35:95:a0:6a:1a:a5:bd:09:
                    09:b1:fe:89:53:50:34:90:b0:ee:c7:79:78:75:ae:
                    e5:c5:0e:8d:1d:18:80:fd:4d:6d:03:a4:d6:51:87:
                    38:52:4c:bc:d4:b0:d4:88:e7:7b:0a:e8:ab:e3:d8:
                    7e:dc:e2:10:53:68:c2:21:c3:e8:6c:df:5e:67:c8:
                    f5:29:f5:fc:95:02:5d:ed:11:7b:1b:63:e5:63:c4:
                    4e:9d:68:61:cd:6f:9e:80:61:f1:4c:3b:04:b7:22:
                    02:46:be:ab:71:8b:8b:7a:85:27:fa:c0:4e:61:c4:
                    2c:98:96:1d:8c:dd:61:d1:df:ae:2f:5c:28:fd:00:
                    41:21:30:72:37:40:1c:34:32:a5:16:3b:a6:55:30:
                    67:80:92:7c:ab:22:a3:9a:3f:ee:6a:8c:30:f3:d7:
                    5d:d0:2f:05:35:f6:90:3b:3e:3a:2d:b9:50:c5:0b:
                    92:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:58:BB:35:F3:A1:57:5B:7B:FA:47:1E:69:AE:23:1F:6C:01:AA:71
            X509v3 Authority Key Identifier:
                keyid:B9:25:0F:DE:3F:AB:D5:9F:A5:60:82:30:FE:A7:A2:3C:4B:4C:89:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/8FD49B16BAE411EE9198A471C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7960::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:f9:37:92:e6:b3:9d:a6:3f:93:b5:51:7a:7c:44:f0:ef:45:
         9c:7d:15:0e:48:24:a1:67:73:6e:36:46:05:ee:ce:00:88:e5:
         a6:1c:31:3e:28:6c:10:d7:b4:ae:fd:fb:d3:26:16:38:ab:4f:
         b0:ae:32:44:df:6e:37:65:f8:61:60:ac:c5:05:58:44:88:6d:
         fb:92:f4:15:c9:f5:74:78:b6:b5:bc:c4:fe:93:8b:c3:9a:c9:
         39:fd:77:d8:3e:c2:bb:be:df:4d:8e:3b:48:5e:30:50:df:74:
         4c:59:ca:b0:84:81:08:30:f6:26:5b:70:21:77:9a:b3:38:fc:
         56:eb:1e:49:58:ef:89:4a:10:87:bf:c9:3c:50:fd:db:7b:c8:
         57:1e:90:ad:00:76:62:97:a7:bb:41:9d:e2:d0:7b:3b:9b:f9:
         7d:61:4e:be:b1:3f:7c:0f:55:43:03:2a:64:a5:a3:aa:2a:c4:
         89:86:0c:44:f6:63:5e:17:69:3a:46:a2:52:ab:7a:59:64:2e:
         db:a3:36:cb:dc:9f:b5:c9:a2:4c:1b:74:78:9f:8e:0b:8d:d8:
         21:22:eb:13:d9:b4:81:98:09:6b:c5:31:9a:b8:1d:96:cb:b5:
         51:09:03:ad:ab:9b:dd:bc:7e:af:c0:06:f4:f1:a2:0c:54:aa:
         19:7e:97:84
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
QTg1MTExMC8GA1UEBRMoQjkyNTBGREUzRkFCRDU5RkE1NjA4MjMwRkVBN0EyM0M0
QjRDODk2ODAeFw0yNDAxMjQxODE1MzJaFw0yNTA1MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY1YjE1M2M0LWRkMGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDBEkyRhrzG2IBfVWDJxsSjwitsv5h2Kul0bymOvWw9NnRngwA3rOo/xfjub3s3
cy7zTPTj+PaRvRJvJWpVVa6e01sw5sbKAwEOr/PcMXlpocQ1laBqGqW9CQmx/olT
UDSQsO7HeXh1ruXFDo0dGID9TW0DpNZRhzhSTLzUsNSI53sK6Kvj2H7c4hBTaMIh
w+hs315nyPUp9fyVAl3tEXsbY+VjxE6daGHNb56AYfFMOwS3IgJGvqtxi4t6hSf6
wE5hxCyYlh2M3WHR364vXCj9AEEhMHI3QBw0MqUWO6ZVMGeAknyrIqOaP+5qjDDz
113QLwU19pA7PjotuVDFC5KhAgMBAAGjggKWMIICkjAdBgNVHQ4EFgQUSVi7NfOh
V1t7+kceaa4jH2wBqnEwHwYDVR0jBBgwFoAUuSUP3j+r1Z+lYIIw/qeiPEtMiWgw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZBODUxLzk1QTYxMTlDQjlE
RjExRUU5NEI0MjQyQUM0RjlBRTAyL3VTVVAzai1yMVotbFlJSXdfcWVpUEV0TWlX
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvdVNVUDNqLXIxWi1sWUlJd19xZWlQRXRNaVdnLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QTg1MS85NUE2MTE5Q0I5REYxMUVFOTRCNDI0MkFDNEY5QUUwMi84RkQ0OUIxNkJB
RTQxMUVFOTE5OEE0NzFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACQBeWAwDQYJKoZIhvcNAQELBQADggEBALD5N5Lms52mP5O1
UXp8RPDvRZx9FQ5IJKFnc242RgXuzgCI5aYcMT4obBDXtK79+9MmFjirT7CuMkTf
bjdl+GFgrMUFWESIbfuS9BXJ9XR4trW8xP6Ti8OayTn9d9g+wru+302OO0heMFDf
dExZyrCEgQgw9iZbcCF3mrM4/FbrHklY74lKEIe/yTxQ/dt7yFcekK0AdmKXp7tB
neLQezub+X1hTr6xP3wPVUMDKmSlo6oqxImGDET2Y14XaTpGolKrellkLtujNsvc
n7XJokwbdHifjguN2CEi6xPZtIGYCWvFMZq4HZbLtVEJA62rm928fq/ABvTxogxU
qhl+l4Q=
-----END CERTIFICATE-----
Generated at Sat Jun 1 11:47:37 2024 by rpki-client on console-ams.rpki-client.org